Add the "nosegneg" fake capabilty to the vsyscall page notes. This isused by the runtime linker to select a glibc version which thendisables negative-offset accesses to the thread-local segment via%gs. These accesses require emulation in Xen (because segments aretruncated to protect the hypervisor address space) and avoiding themprovides a measurable performance boost.